Ethical Hacking: Penetration Testing Methodology Quiz

Quiz: Framework and Preparation

Pass mark: 70%. You can retry as many times as you need.

1 What is the main element that distinguishes a penetration tester from an attacker? Single answer The tools they use Their level of skill A written authorisation and a defined scope Their intention to help, even without permission

2 Which items belong in a good authorisation and scope document? (several answers) Multiple answers possible The list of systems that are out of scope The dates and hours when testing is allowed A guarantee that no system can ever be disrupted Emergency contacts on both sides

3 A client wants to find out exactly what an anonymous person on the internet can discover and reach. Which approach fits best? Single answer White box Black box Grey box with administrator accounts

4 Your client asks you to test its web shop, which runs on a cloud provider's platform. What is the correct attitude? Single answer The client's authorisation covers the provider's infrastructure too Ignore the provider, since it is hosted anyway Refuse any test on hosted systems Check the provider's testing rules and exclude or separately agree anything the client does not control

5 Which practices are appropriate when setting up your working environment? (several answers) Multiple answers possible Using cracked versions of commercial tools to save money Putting vulnerable machines on an isolated host-only network Taking snapshots before attacking a machine Keeping a dated journal of actions and findings